This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json) Hash identifier: TRd29vZlt3JZwWL1AYDAjl9g8a6xbYDvtg7RzrDPscQ= Subject key identifier: 23:16:15:57:0E:11:3D:33:1E:CD:55:76:43:D1:4A:BB:2A:F4:E0:1B Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b Certificate serial: 019B41A4CE9FDE8DA4ADCF698DA749A271F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft Manifest number: 0D76 Signing time: Sun 21 Dec 2025 16:01:18 +0000 Manifest this update: Sun 21 Dec 2025 16:01:18 +0000 Manifest next update: Mon 22 Dec 2025 16:01:18 +0000 Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=) 2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: YzddL4B6OeMSK1IqSebQZzsEjWMYGnHFL2mZ7KlfSBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:ce:9f:de:8d:a4:ad:cf:69:8d:a7:49:a2:71:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b Validity Not Before: Dec 21 16:01:18 2025 GMT Not After : Dec 22 16:01:18 2025 GMT Subject: CN=231615570e113d331ecd557643d14abb2af4e01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:14:31:f8:93:e9:4e:f7:d0:26:ea:e6:6f: ab:7b:10:7e:b5:2a:a7:1d:02:d8:a1:8e:e0:35:e3: c8:ac:77:f8:46:70:8f:2d:2b:3f:33:d0:fb:56:83: 33:a8:6f:3a:5e:c1:d8:2a:2d:88:24:47:08:25:98: 16:7e:c3:ef:de:66:83:bc:ca:90:80:9b:9e:80:36: c2:c4:af:d6:07:17:12:16:36:d9:12:fa:d9:dc:62: 1f:f8:37:e1:07:e8:a3:51:a7:be:1d:e3:65:f9:1e: 0b:e4:e8:79:6d:72:3e:93:16:60:27:92:23:e6:18: 79:26:2a:5b:60:2c:d6:54:73:a4:83:32:a3:86:73: 81:b3:cd:6d:97:bd:41:55:68:9a:4a:50:27:28:aa: 90:4b:29:35:e5:9a:ca:5b:2c:70:9e:e0:91:85:b7: e7:4a:87:d9:14:25:a0:12:af:f7:9e:bf:98:2d:63: 77:b9:ab:86:3d:c0:05:bf:ac:47:2b:dd:52:27:bd: 6f:88:e4:20:fe:9d:0e:e8:5d:ee:1a:4e:4b:c6:7a: b5:cc:52:f9:61:32:64:c1:8a:fe:53:aa:d7:f1:ad: 16:cc:a3:64:b0:66:52:a3:8f:db:bb:c2:26:ba:46: cb:98:50:61:a4:36:59:eb:76:86:43:02:66:2d:e1: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:15:57:0E:11:3D:33:1E:CD:55:76:43:D1:4A:BB:2A:F4:E0:1B X509v3 Authority Key Identifier: keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9f:26:9a:d4:92:fa:a2:09:05:65:04:ab:79:77:43:e9:4c: d0:fa:be:75:80:70:27:74:5a:e8:11:89:a9:f2:6f:11:43:6f: 43:03:c6:cf:46:4d:d8:ce:5b:c6:ad:7b:11:8b:3d:e0:ae:d2: cd:e4:b2:03:d8:a4:b6:a2:59:4f:12:d2:af:07:8a:e4:fd:f9: 26:cf:c4:b5:5b:21:cf:3c:ef:71:e8:12:e4:d0:ef:6f:66:a7: 3d:15:2d:63:20:2b:87:df:f6:b6:20:1c:c5:60:c2:7b:12:17: 75:de:83:66:c5:1c:3a:f8:ef:5b:7c:81:b0:c2:77:37:1a:35: 0e:35:51:fe:23:66:05:b3:9c:dd:e4:22:a1:ac:42:c8:08:c0: d2:3b:26:99:dc:50:63:38:d7:a4:01:60:a2:d0:e9:ff:b0:07: 81:74:dc:c8:2a:35:5a:79:28:93:f4:41:6a:79:10:8e:2d:64: 3b:cd:41:fa:be:8b:4f:16:f2:19:26:74:c3:63:26:8d:c4:af: 13:77:71:b5:ca:d1:d0:27:f7:d4:70:94:9e:b3:a1:4f:a2:f9: 7f:15:46:64:0c:49:fe:e4:70:0f:46:db:f8:e3:cb:44:e7:40: 07:7d:e3:c7:82:e3:a1:39:3e:5e:de:f6:73:f7:95:3a:a8:5d: bd:5a:23:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpM6f3o2krc9pjadJonH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmZjYmVjODg4YzEwNDdmMjIxZDdjZjkzOTZiZjE0MTJh YmFmOWIwHhcNMjUxMjIxMTYwMTE4WhcNMjUxMjIyMTYwMTE4WjAzMTEwLwYDVQQD EygyMzE2MTU1NzBlMTEzZDMzMWVjZDU1NzY0M2QxNGFiYjJhZjRlMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhokUMfiT6U730Cbq5m+rexB+tSqn HQLYoY7gNePIrHf4RnCPLSs/M9D7VoMzqG86XsHYKi2IJEcIJZgWfsPv3maDvMqQ gJuegDbCxK/WBxcSFjbZEvrZ3GIf+DfhB+ijUae+HeNl+R4L5Oh5bXI+kxZgJ5Ij 5hh5JipbYCzWVHOkgzKjhnOBs81tl71BVWiaSlAnKKqQSyk15ZrKWyxwnuCRhbfn SofZFCWgEq/3nr+YLWN3uauGPcAFv6xHK91SJ71viOQg/p0O6F3uGk5Lxnq1zFL5 YTJkwYr+U6rX8a0WzKNksGZSo4/bu8ImukbLmFBhpDZZ63aGQwJmLeEycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMWFVcOET0zHs1VdkPRSrsq9OAbMB8GA1UdIwQY MBaAFD//y+yIjBBH8iHXz5OWvxQSq6+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2It NjE2NjdjNzY5MWIyLzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2ItNjE2NjdjNzY5MWIy LzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ8mmtSS +qIJBWUEq3l3Q+lM0Pq+dYBwJ3Ra6BGJqfJvEUNvQwPGz0ZN2M5bxq17EYs94K7S zeSyA9iktqJZTxLSrweK5P35Js/EtVshzzzvcegS5NDvb2anPRUtYyArh9/2tiAc xWDCexIXdd6DZsUcOvjvW3yBsMJ3Nxo1DjVR/iNmBbOc3eQioaxCyAjA0jsmmdxQ YzjXpAFgotDp/7AHgXTcyCo1Wnkok/RBankQji1kO81B+r6LTxbyGSZ0w2MmjcSv E3dxtcrR0Cf31HCUnrOhT6L5fxVGZAxJ/uRwD0bb+OPLROdAB33jx4LjoTk+Xt72 c/eVOqhdvVojrw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:33:01 2025 by rpki-client